CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {11111111-1111-1111-1111-110611991117} | 6b064ce819644ac68b741b4c9b9 68d8c0069917, Browser-AppsEd2.2, Browser.v2.App, Browserv3.1.Apps, BrowserV3AppPlus, BrowsersApp+V2.3, BrowserAppPlus.v4, BrowserServicesv3.2, BrowserAppsPlus2.1 | Browser-AppsEd2.2-bho.dll, Browser-AppsEd2.2-bho64.dll, Browser.v2.App-bho.dll, Browserv3.1.Apps, BrowserV3AppPlus-bho.dll, BrowsersApp+V2.3-bho.dll, BrowserAppPlus.v4-bho.dll, BrowserServicesv3.2-bho.dll, BrowserAppsPlus2.1-bho.dll | Crossrider cross-browser plugin, often bundled with third party software or part of an adware bundle - detected as Adware.CrossRider and by Malwarebytes Anti-Malware as "PUP.Optional.CrossRider" or "PUP.Optional.BrowserApp.A" - also see here | X BHO |
| {11111111-1111-1111-1111-110611801167} | 46fac5e299884f728e2f2dec4ad 786430068067, Browser App+ v1, BrowserAppsPlus2.1, Browser-AppsEd2.2 | Browser App+ v1-bho.dll, Browser App+ v1-bho64.dll, BrowserAppsPlus2.1-bho.dll, Browser-AppsEd2.2-bho.dll | Crossrider cross-browser plugin, often bundled with third party software or part of an adware bundle - detected as Adware.CrossRider and by Malwarebytes Anti-Malware as "PUP.Optional.CrossRider" or "PUP.Optional.BrowserApp.A" | X BHO |
| {11111111-1111-1111-1111-110611031146} | CrossriderApp0060346, Browser App, Browseri_Appe 1.2, Browser_AppS 1.1 | Browser App-bho.dll, Browser App-bho64.dll, Browseri_Appe 1.2-bho.dll, Browser_AppS 1.1-bho.dll | Crossrider cross-browser plugin, often bundled with third party software or part of an adware bundle - detected as Adware.CrossRider and by Malwarebytes Anti-Malware as "PUP.Optional.CrossRider" or "PUP.Optional.BrowserApp.A" - also see here | X BHO |
| {11111111-1111-1111-1111-110611441149} | CrossriderApp0064449, Browser+ Apps, Browser+ Apps+, Browsers+ App# | Browser+ Apps-bho.dll, Browser+ Apps-bho64.dll, Browser+ Apps+-bho.dll, Browsers+ App#-bho.dll | Crossrider cross-browser plugin, often bundled with third party software or part of an adware bundle - detected as Adware.CrossRider and by Malwarebytes Anti-Malware as "PUP.Optional.CrossRider" or "PUP.Optional.BrowsersApp.A" - also see here | X BHO |
| {11111111-1111-1111-1111-110311281150} | CrossriderApp0032850, Object Browser, Object_Browser_v1, ObjectBrowser_version2.1, ObjBrwsr-v3.0, 07462cf09e3b013003f40973f5b 3301f0032850 | Object Browser-bho.dll, Object Browser-bho64.dll, Object_Browser_v1-bho.dll, ObjectBrowser_version2.1-bho.dll, ObjBrwsr-v3.0-bho.dll | Crossrider cross-browser plugin, often bundled with third party software or foistware - detected as Adware.GamePlayLabs or Adware.CrossRider and by Malwarebytes Anti-Malware as PUP.Optional.ObjectBrowser.A - also see here | X BHO |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| browser | browser.exe | Added by the browser AdBlaster - Adware. Note: Located in \%Program Files%\AdBlaster\Application\ | X |
| WebDiscoverBrowser | browser.exe | Added by the WebDiscover Browser 2 PUP.Optional.WebDiscoverBrowser. Note: Located in \%Program Files%\WebDiscoverBrowser\2.173.2\ | X |
| TelevisionFanatic EPM Support | Browser Hijacker64medint.exe | Added by the TelevisionFanatic Browser Hijacker. Note: Located in \%Program Files%\Browser Hijacker | X |
O9 List Results
Internet Explorer Buttons
Internet Explorer Buttons
| CLSID | Name | Filename | Description | Status |
| {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} | ???????? ? ???? | WriterBrowserExtension.dll | Related to Windows Live Note: Located in \%Program Files%\Windows Live\Writer\ Note: The Object name is relative to the locale. | L |
| {237EB6DA-3FEA-4DD2-8A61-A901B5C489D7} | Ghostery | GhosteryBrowserHelperObjec.dll | Related to Ghostery Inc Note: Located in \%Program Files%\GhosteryIEplugin\ | O |
| {328ECD19-C167-40eb-A0C7-16FE7634105E} | Samsung AnyWeb Prin | W2PBrowser.dll | Related to Samsung AnyWeb Print. Note: Located in \%Program Files%\Samsung AnyWeb Print\ | L |
O20 List Results
AppInit_DLLs & Winlogon Notify
AppInit_DLLs & Winlogon Notify
| Name | Filename | Description | Status |
| (no name) | BrowserSystemEnahncer_x64.dll, BrowserSystemEnahncer.dll | SProtector variant | X AppInit_DLLs |
O21 List Results
ShellServiceObjectDelayLoad
ShellServiceObjectDelayLoad
| CLSID | Name | Filename | Description | Status |
| {********-****-****-****-************} | iebrowser | iebrowser.dll | Smitfraud | X |
O23 List Results
Windows Services
Windows Services
| Name | Filename | Description | Status |
| Computer Browser (Browser) | browser.dll | Part of Windows Vista Note: Located in C:\%WINDIR%\System32 | L |
| Browser | svchost.exe -k Browser | Added by the Fuwudoor TROJAN! | X |
O16 List Results
ActiveX
ActiveX
| CLSID | Name | Filename | Description | Status |
| {C432C4BD-3566-411C-8F3C-E5E0D3AE5D33} | (CBrowser Class) | mbr...MINIBrowser.CAB | L | |
| {67DABFBF-D0AB-41FA-9C46-CC0F21721616} | DivXBrowserPlugin Object | DivXBrowserPlugin.cab | Related to DivX software | L |
Drivers List Results
Driver Entry
Driver Entry
| Name | Filename | Description | Status |
| Browser Manager | browsemngr.exe, brwmngr.exe, mngr.exe, browsermngr.exe | Installs the BabylonToolbar without your consent. | X |
| SQLBrowser | sqlbrowser.exe | Related to sqlbrowser.exe SQL Server Browser from Microsoft Corp. | L |
| BrowserProtect | BrowserProtect.exe | Added by the BrowserProtect.exe Added without your concent by Babylon. Claro check it out. | X |
| srvBrowserProtect | srvBrowserProtect.exe | Added by the srvBrowserProtect.exe Added without your concent by Babylon. Claro check it out. | X |
| BrowserDefendert | BrowserDefender.exe | Added by the BrowserDefender.exe a variant of Win32/bProtector.A | X |
FF Extensions List Results
Firefox Extension
Firefox Extension
| CLSID | Name | Filename | Description | Status |
| firefox@browser-security.de | Browser-Security | firefox@browser-security.de.xpi | Browser-Security by Vondos Media GmbH claims to protect from phishing and malware. Classified as potentially unwanted program and detected as "PUP.Optional.BrowserSecurity" or "PUP.Vondos.BrowserSec". See here and here. | X |
| browser.controller@redmorph.com | RedMorph Browser Controller | browser.controller@redmorph.com.xpi | RedMorph Browser Controller couples all the features of an AD TRACKER BLOCKER and CONTENT FILTER. | L |
| pass-browser@web-extensions | pass-browser | pass-browser@web-extensions.xpi | pass-browser allows to access your passwords from pass in your browser so you can copy/paste them or use form-fill. Requires a self-hosted password store and a compatible http server, e.g. pass-server-node. This add-on is read-only! | L |
| @ev-browser-extension-firefox | EventVODs Spoiler Prevention BETA | @ev-browser-extension-firefox.xpi | EventVODs Spoiler Prevention BETA hides related videos, comments and video length by default on Youtube to prevent spoilers. | L |